agent-claw/cdk/node_modules/aws-cdk-lib/aws-cloudtrail/SAMPLE-EVENTS.md

Some sample CloudTrail events

For reference.

S3

PutObject

{
  "eventSource": "s3.amazonaws.com",
  "resources": [
    {
      "ARN": "arn:aws:s3:::amzn-s3-demo-bucket/OBJECTKEY",
      "type": "AWS::S3::Object"
    },
    {
      "accountId": "123456789012",
      "ARN": "arn:aws:s3:::amzn-s3-demo-bucket",
      "type": "AWS::S3::Bucket"
    }
  ],
  "eventTime": "2020-05-22T08:38:05Z",
  "userAgent": "[aws-cli/1.16.96 Python/2.7.12 Linux/4.4.0-146-generic botocore/1.12.86]",
  "readOnly": false,
  "recipientAccountId": "123456789012",
  "awsRegion": "eu-west-1",
  "requestID": "CF9748DFDC5FB0A4",
  "additionalEventData": {
    "CipherSuite": "ECDHE-RSA-AES128-GCM-SHA256",
    "bytesTransferredOut": 0,
    "AuthenticationMethod": "AuthHeader",
    "x-amz-id-2": "hRJMAs5p4ALZIabP4ATIL53npWU61+N6LYWj02gdQtR0ymKSySzVXUSZx7ydv7tRJwk+XMaPerM=",
    "bytesTransferredIn": 197,
    "SignatureVersion": "SigV4"
  },
  "eventType": "AwsApiCall",
  "eventID": "3074546e-1bfa-4973-8502-b1bb4d0bda1a",
  "eventVersion": "1.05",
  "eventName": "PutObject",
  "sourceIPAddress": "1.2.3.4",
  "userIdentity": {
    "accountId": "123456789012",
    "type": "AssumedRole",
    "principalId": "AROAJBNCAL3UTR5C42U4M:user-SomeRole",
    "accessKeyId": "AZYCAIJERO6H7",
    "sessionContext": {
      "attributes": {
        "mfaAuthenticated": "false",
        "creationDate": "2020-05-22T08:10:21Z"
      },
      "sessionIssuer": {
        "accountId": "123456789012",
        "type": "Role",
        "principalId": "AROAJBNCAL3UTR5C42U4M",
        "userName": "SomeRole",
        "arn": "arn:aws:iam::123456789012:role/SomeRole"
      }
    },
    "arn": "arn:aws:sts::123456789012:assumed-role/SomeRole/user-SomeRole"
  },
  "responseElements": null,
  "requestParameters": {
    "bucketName": "amzn-s3-demo-bucket",
    "Host": "amzn-s3-demo-bucket.s3.eu-west-1.amazonaws.com",
    "key": "OBJECTKEY"
  }
}